How to Prepare a Change in Control Application for FCA and PRA Approval

A Change in Control application is not a form-filling exercise. It is a test of whether the acquirer, the target, and the proposed structure meet the statutory assessment criteria under Part XII of FSMA, and whether the regulators can satisfy themselves on prudential soundness, fitness and propriety, financial crime risk, and the ongoing viability of the regulated business. Applications fail or stall not usually because the deal is unsound, but because the submission is incomplete, inconsistent, or treats the regulator as an audience to be managed rather than a decision-maker to be informed.

Start with the right notification form and controller level

Identify every person acquiring or increasing control at the 10%, 20%, 30% and 50% thresholds, including indirect controllers up the ownership chain. The common error is stopping at the immediate acquirer. The FCA and PRA want the full chain to ultimate beneficial owners, with shareholdings, voting rights, and any acting-in-concert arrangements set out clearly. Use Form A for corporate controllers, Form B for trusts, and the individual controller form for natural persons. Each controller at each level needs its own submission.

If the target is dual-regulated, the PRA leads and consults the FCA. If solo-regulated by the FCA, file with the FCA. Pre-notification engagement with the lead regulator is almost always worth it for anything other than a straightforward minority increase.

Build the submission around the five statutory assessment criteria

The regulators must assess: reputation of the acquirer, reputation and experience of those who will direct the business, financial soundness, ongoing compliance of the target, and financial crime risk. Structure your supporting materials so that each criterion has a clear evidential thread.

For reputation, disclose regulatory history, litigation, and any adverse findings in any jurisdiction. Do not omit matters you hope the regulator will not find. They will, and the omission becomes the issue.

For financial soundness, provide audited accounts, group structure, and a clear explanation of how the acquisition is funded. If debt is involved, show servicing capacity and covenants. If funds originate outside the UK, document the full source of funds and source of wealth trail with supporting evidence.

For financial crime risk, be specific about PEP exposure, sanctions screening, and the AML framework that will apply to the target post-completion.

Address the business plan and governance honestly

The regulator wants to understand what the regulated firm will look like on day one post-completion and across the next three years. This means a business plan with realistic financial projections, capital and liquidity forecasts where relevant, and a clear organisation chart showing SMF holders, reporting lines, and any planned changes.

The most common failure here is a business plan that bears little resemblance to the acquirer's actual intentions. If you plan to change strategy, rebrand, exit lines, or integrate systems, say so. Regulators react badly to discovering material changes after approval.

Where applications actually stall

In practice, the recurring issues are: incomplete controller chains, unexplained offshore holding structures, source of funds documentation that stops one layer short of the ultimate source, SMF succession that has not been thought through, and inconsistency between the business plan, the financial projections, and the governance arrangements.

Build in a pre-submission review by someone independent of the deal team whose job is to find these gaps. The cost of a four week internal review is trivial compared to a six month regulatory delay.

Engage the regulator as a counterparty, not an obstacle

Request a pre-application meeting for anything novel or complex. Be straightforward about weak points: regulators respect candour and penalise discovery. When they ask follow-up questions, answer the question asked, provide the evidence, and do not argue the assessment criteria.

The next decision point: before you file, commission an independent read of the full submission against the five criteria. If any criterion lacks a clear evidential answer, you are not ready.

Frequently Asked Questions

How long does the process actually take?

The statutory assessment period is 60 working days from the date the regulator confirms the notification is complete. In practice, completeness confirmation can take several weeks, and the regulator can pause the clock once to request further information. Plan for four to six months from filing to approval for a reasonably complex case.

What happens if we complete without approval?

Completion of a control transaction without prior approval is a criminal offence under FSMA and the regulators can direct that voting rights be suspended or shares be sold. There is no workaround. Conditional contracts with completion contingent on approval are the standard structure.

Do minority investors below 10% need to notify?

No, but acting in concert arrangements, shareholder agreements granting veto rights, or options that could take a holder above 10% can trigger controller status. Review the full economic and governance arrangement, not just the headline shareholding.

How should we handle sensitive information about the acquirer?

Provide it. The regulators have statutory confidentiality obligations and routinely handle sensitive personal, financial, and commercial information. Attempting to withhold or minimise material information is the single fastest way to damage the application and the acquirer's standing with the regulator for future interactions.